Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa
File: 3138392e33302e39362e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: n35cwfvL6IpqZbK1gymCFuLNADl4RH8RhzcrB6FNNMY=
Subject key identifier: 95:AC:8A:94:9F:A9:29:EC:FE:FE:55:FC:69:94:08:D8:97:EC:31:1A
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 3CE1FDFE2A11F735021E935E2BEEF9A37B7FED99
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 16 Sep 2026 15:35:02 +0000
ROA not before: Wed 16 Sep 2026 15:30:02 +0000
ROA not after: Wed 15 Sep 2027 15:35:02 +0000
asID: 401362
IP address blocks: 189.30.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e1:fd:fe:2a:11:f7:35:02:1e:93:5e:2b:ee:f9:a3:7b:7f:ed:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:02 2026 GMT
Not After : Sep 15 15:35:02 2027 GMT
Subject: CN=95AC8A949FA929ECFEFE55FC699408D897EC311A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9f:de:52:65:4a:e4:61:66:dd:37:4a:ec:1b:
1b:bc:5d:3d:fa:64:3d:3b:a9:21:03:b9:ce:b3:03:
04:ab:36:10:4b:53:a0:9e:ba:af:f7:e7:97:f4:4b:
9c:ff:df:c1:59:fd:c0:52:33:73:dd:56:bf:3b:e8:
5a:01:92:ee:a5:b0:75:25:f2:da:ab:10:57:e2:d2:
76:ff:ca:a7:33:db:ae:d4:e1:ad:76:92:e3:b6:45:
2a:c1:ea:69:ca:19:77:63:74:f2:74:a0:0e:10:04:
7d:8f:03:54:06:35:42:18:70:17:23:16:ef:a2:82:
f7:23:94:0d:4a:49:82:96:98:01:05:24:81:9c:16:
dd:b9:f9:4d:a7:89:94:8a:8c:20:b7:1b:d3:0e:05:
5b:82:ac:85:b7:7d:73:dc:13:f8:6c:69:48:13:e6:
5b:0b:74:99:72:d7:03:55:cf:82:e7:b4:5c:e3:93:
9a:43:71:55:7f:48:7a:e6:09:1c:6c:22:0e:90:17:
ad:a2:39:4d:7c:b9:5f:b3:b3:c1:a4:7f:fc:0b:db:
70:56:cf:78:ae:8e:37:37:4e:51:99:19:57:a4:b6:
26:c0:4c:7f:47:24:10:af:0c:c8:ec:fc:6a:04:c8:
2d:78:58:e1:ab:d0:a3:77:a1:b6:2c:b1:60:45:4e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:8A:94:9F:A9:29:EC:FE:FE:55:FC:69:94:08:D8:97:EC:31:1A
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39362e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.96.0/24
Signature Algorithm: sha256WithRSAEncryption
99:54:6e:ce:c3:9c:4f:39:ee:b2:da:e1:fe:e9:66:13:6b:fb:
22:98:b8:31:32:5a:38:34:39:92:d9:df:50:76:90:ac:ef:f7:
1d:11:30:a0:ae:f0:8a:f4:05:8f:36:d2:46:da:1c:cb:8a:61:
30:30:ba:9c:c4:ab:4e:fa:92:4d:fc:6f:2a:59:b4:86:6f:94:
a1:a2:96:0c:65:16:bd:44:2c:70:fd:c7:6b:55:98:58:a9:74:
0f:89:5f:e5:94:29:a4:44:3e:ad:a7:8a:a0:59:84:72:8d:8d:
d6:ee:65:b8:a1:2e:69:b8:fc:c1:f4:52:90:47:88:18:8c:80:
aa:d5:1b:9e:8b:a2:4d:fa:a9:6b:b8:8a:43:9e:17:46:34:0b:
b8:2b:45:c0:72:63:5f:65:c2:07:a8:19:2d:a1:96:dc:fc:5b:
25:8f:2e:18:bd:8f:19:f0:0d:98:23:b9:72:c6:87:2a:d3:21:
c8:08:ce:cd:8d:bd:d5:4c:9e:cb:aa:46:57:04:67:23:e0:c9:
9d:79:74:27:c0:6a:27:c2:af:c6:27:7e:af:9d:1c:9a:3b:b9:
11:c7:7e:90:a3:f1:63:5f:a4:33:15:e4:0d:dd:18:dd:26:a5:
57:78:82:d2:91:02:ea:d9:52:d3:8f:69:2d:0a:8e:89:68:84:
43:bd:66:59
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPOH9/ioR9zUCHpNeK+75o3t/7ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDJaFw0yNzA5MTUxNTM1MDJaMDMxMTAvBgNV
BAMTKDk1QUM4QTk0OUZBOTI5RUNGRUZFNTVGQzY5OTQwOEQ4OTdFQzMxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsn95SZUrkYWbdN0rsGxu8XT36
ZD07qSEDuc6zAwSrNhBLU6Ceuq/355f0S5z/38FZ/cBSM3PdVr876FoBku6lsHUl
8tqrEFfi0nb/yqcz267U4a12kuO2RSrB6mnKGXdjdPJ0oA4QBH2PA1QGNUIYcBcj
Fu+igvcjlA1KSYKWmAEFJIGcFt25+U2niZSKjCC3G9MOBVuCrIW3fXPcE/hsaUgT
5lsLdJly1wNVz4LntFzjk5pDcVV/SHrmCRxsIg6QF62iOU18uV+zs8Gkf/wL23BW
z3iujjc3TlGZGVektibATH9HJBCvDMjs/GoEyC14WOGr0KN3obYssWBFTiTtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlayKlJ+pKez+/lX8aZQI2JfsMRowHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM5MmUzMzMwMmUzOTM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
vR5gMA0GCSqGSIb3DQEBCwUAA4IBAQCZVG7Ow5xPOe6y2uH+6WYTa/simLgxMlo4
NDmS2d9QdpCs7/cdETCgrvCK9AWPNtJG2hzLimEwMLqcxKtO+pJN/G8qWbSGb5Sh
opYMZRa9RCxw/cdrVZhYqXQPiV/llCmkRD6tp4qgWYRyjY3W7mW4oS5puPzB9FKQ
R4gYjICq1Ruei6JN+qlruIpDnhdGNAu4K0XAcmNfZcIHqBktoZbc/Fsljy4YvY8Z
8A2YI7lyxocq0yHICM7Njb3VTJ7LqkZXBGcj4MmdeXQnwGonwq/GJ36vnRyaO7kR
x36Qo/FjX6QzFeQN3RjdJqVXeILSkQLq2VLTj2ktCo6JaIRDvWZZ
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:42 2026 by rpki-client